@namzu/sandbox 26.0.0 → 27.0.0

package/dist/backends/kubernetes/workspace-per-sandbox.js

@@ -0,0 +1,119 @@
+/**
+ * Per-sandbox egress on a workspace: the pieces `createKubernetesWorkspace`,
+ * `allocateKubernetesWorkspace` and a workspace handle share.
+ *
+ * ## The shape, and where it differs from a task sandbox
+ *
+ *  - **Label.** The per-sandbox selector label rides on the workspace's
+ *    directly created `Sandbox` pod template, composed by
+ *    `composeAdditionalPodLabels` beside the egress profile. Its VALUE is the
+ *    Sandbox's own name, `namzu-ws-<workspaceId>`: deterministic, known before
+ *    the POST, and stable across a suspend and a resume, because a resume
+ *    patches `operatingMode` and the pod template (labels included) is carried
+ *    by the object, not by the pod.
+ *  - **Owner.** The `Sandbox` itself. A policy names it in `ownerReferences`
+ *    with its `metadata.uid`, so deleting the workspace (`destroy({ deleteDisk:
+ *    true })`, `deleteKubernetesWorkspace`) lets the cluster's garbage
+ *    collector remove every policy it owns. The default `destroy()` only
+ *    suspends, keeps the object, and so keeps the policy.
+ *  - **Name.** `namzu-sbx-<sandbox uid>`, the same rule as a task sandbox. The
+ *    workspace NAME is deterministic and its uid is not, so a workspace deleted
+ *    and created again under the same name selects by the same label value
+ *    and owns a policy of a different name.
+ *
+ * ## Suspend and resume
+ *
+ * The behaviour is one rule, applied on every path that is about to run the
+ * workspace's pod: a resume, and an open of an existing workspace.
+ *
+ *  1. The admission fence is re-verified from scratch (never from a memo). A
+ *     fence that is missing or would not enforce REFUSES the resume, before
+ *     the patch: the workspace stays suspended, which is the only state that
+ *     is safe without the fence, and nothing is written.
+ *  2. Every per-sandbox policy in the namespace that selects this workspace
+ *     (name prefix `namzu-sbx-`, selector label value equal to the Sandbox's
+ *     name) and that this Sandbox does not own (no `ownerReferences` entry of
+ *     kind `Sandbox` with this name and the uid the cluster reports NOW) is
+ *     deleted. Such a policy belongs to a workspace that was deleted and
+ *     created again under the same name and has not been garbage-collected
+ *     yet; left alone it would grant the new workspace what the old one's
+ *     consent covered.
+ *  3. A policy this Sandbox owns is KEPT, unchanged. A suspend is not a
+ *     revocation: the grant was admitted by the fence when it was written and
+ *     the resumed pod carries the same label, so the policy applies to it
+ *     again. A host that wants the grant gone calls `setNetworkPolicy({
+ *     allowedHosts: [] })` (which deletes it) before it suspends.
+ *
+ * A freshly created workspace gets step 2 after the create reply, with the uid
+ * the reply carried.
+ *
+ * ## What is NOT proven here
+ *
+ * That any of it is enforced. Enforcement is the CNI's data plane: it needs a
+ * cluster running Cilium, the same as the task path.
+ */
+import { perSandboxEgressLabelKey } from './egress-policy.js';
+import { KubernetesAlreadyGoneError } from './k8s-client.js';
+import { ciliumNetworkPolicyCollectionPath, ciliumNetworkPolicyPath } from './objects.js';
+import { PER_SANDBOX_POLICY_NAME_PREFIX } from './per-sandbox-policy.js';
+/** The profile variant a workspace with per-sandbox egress configured carries. */
+export const KUBERNETES_PER_SANDBOX_PROFILE_VARIANT = 'core/no-network+per-sandbox';
+/**
+ * The extra pod-label map a workspace named `sandboxName` contributes to
+ * `composeAdditionalPodLabels`, or `undefined` when `perSandbox` is not
+ * configured, which is what keeps that workspace's request log unchanged.
+ */
+export function perSandboxWorkspaceLabels(egress, sandboxName) {
+    const key = perSandboxEgressLabelKey(egress);
+    return key === undefined ? undefined : { [key]: sandboxName };
+}
+/** `labels` without the per-sandbox key `extra` carries; `labels` itself when there is none. */
+export function withoutPerSandboxLabel(labels, extra) {
+    if (extra === undefined)
+        return labels;
+    return Object.fromEntries(Object.entries(labels).filter(([key]) => !(key in extra)));
+}
+/**
+ * The names of the per-sandbox policies this workspace's label selects and
+ * its Sandbox does not own. Read only.
+ */
+export async function findForeignPerSandboxPolicies(client, namespace, labelKey, sandboxName, ownerUid, signal) {
+    const list = await client.request('GET', ciliumNetworkPolicyCollectionPath(namespace), undefined, signal);
+    const foreign = [];
+    for (const item of list?.items ?? []) {
+        const name = item?.metadata?.name;
+        if (typeof name !== 'string' || !name.startsWith(PER_SANDBOX_POLICY_NAME_PREFIX))
+            continue;
+        if (item?.spec?.endpointSelector?.matchLabels?.[labelKey] !== sandboxName)
+            continue;
+        const owned = (item.metadata?.ownerReferences ?? []).some((ref) => ref?.kind === 'Sandbox' && ref.name === sandboxName && ref.uid === ownerUid);
+        if (!owned)
+            foreign.push(name);
+    }
+    return foreign;
+}
+/**
+ * Steps 1 and 2 of the resume rule above: prove the fence, then delete the
+ * policies that select this workspace and that its Sandbox does not own.
+ * Returns the names it deleted. Throws the fence's own refusal, having
+ * written nothing, when the fence does not verify.
+ */
+export async function reverifyPerSandboxEgress(options) {
+    const { client, namespace, sandboxName, ownerUid, egress, fence, signal } = options;
+    await fence.assertApplied(signal);
+    const labelKey = perSandboxEgressLabelKey(egress);
+    if (labelKey === undefined)
+        return [];
+    const foreign = await findForeignPerSandboxPolicies(client, namespace, labelKey, sandboxName, ownerUid, signal);
+    for (const name of foreign) {
+        try {
+            await client.request('DELETE', ciliumNetworkPolicyPath(namespace, name), undefined, signal);
+        }
+        catch (err) {
+            if (!(err instanceof KubernetesAlreadyGoneError))
+                throw err;
+        }
+    }
+    return foreign;
+}
+//# sourceMappingURL=workspace-per-sandbox.js.map

package/dist/backends/kubernetes/workspace-per-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-per-sandbox.js","sourceRoot":"","sources":["../../../src/backends/kubernetes/workspace-per-sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,0BAA0B,EAAyB,MAAM,iBAAiB,CAAA;AACnF,OAAO,EAAE,iCAAiC,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACzF,OAAO,EAAE,8BAA8B,EAA8B,MAAM,yBAAyB,CAAA;AAEpG,kFAAkF;AAClF,MAAM,CAAC,MAAM,sCAAsC,GAAG,6BAA6B,CAAA;AAEnF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACxC,MAA0C,EAC1C,WAAmB;IAEnB,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IAC5C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAA;AAC9D,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CACrC,MAAwC,EACxC,KAAmD;IAEnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACtC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;AACrF,CAAC;AAmBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,MAAwB,EACxB,SAAiB,EACjB,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAChC,KAAK,EACL,iCAAiC,CAAC,SAAS,CAAC,EAC5C,SAAS,EACT,MAAM,CACN,CAAA;IACD,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAA;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,8BAA8B,CAAC;YAAE,SAAQ;QAC1F,IAAI,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,WAAW;YAAE,SAAQ;QACnF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CACpF,CAAA;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAiBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAiC;IAEjC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IACnF,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAClD,MAAM,EACN,SAAS,EACT,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,CACN,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,GAAG,YAAY,0BAA0B,CAAC;gBAAE,MAAM,GAAG,CAAA;QAC5D,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC"}

package/dist/backends/kubernetes/workspace.d.ts

@@ -157,10 +157,10 @@
  * arriving mid-transition awaits the one in progress instead of sending a
  * second request into the gap the deferred mark opens.
  */
-import type { Sandbox, SandboxDestroyOptions, SandboxExecResult, SandboxFileEntry, SandboxReadFileOptions, SandboxTcpConnectOptions, SandboxTcpConnection, SandboxWalkFilesOptions } from '@namzu/sdk';
+import type { OpenTerminalOptions, Sandbox, SandboxDestroyOptions, SandboxExecOptions, SandboxExecResult, SandboxFileEntry, SandboxReadFileOptions, SandboxTcpConnectOptions, SandboxTcpConnection, SandboxWalkFilesOptions, TerminalSession } from '@namzu/sdk';
 import { type EgressProfileLabel } from './egress-policy.js';
-import { type KubernetesGuestEvidence, type KubernetesGuestRestart, type KubernetesWorkspaceIdentity } from './identity.js';
-import { type KubernetesBackendInternalConfig } from './index.js';
+import { type KubernetesGuestEvidence, type KubernetesGuestRestart, type KubernetesPinnedGuestIdentity, type KubernetesWorkspaceExpectedIdentity, type KubernetesWorkspaceIdentity } from './identity.js';
+import { type KubernetesBackendInternalConfig, type SandboxTemplateCopy } from './index.js';
 import { type SandboxPodTemplate, type SandboxVolumeClaimTemplate } from './objects.js';
 import { type KubernetesAttachExecutionOptions, type KubernetesAttachTerminalOptions, type KubernetesDetachedExecOptions, type KubernetesFlushReport, KubernetesFlushUnreachableError, KubernetesFlushUnsupportedError, type KubernetesOpenTerminalOptions, type KubernetesQuiesceReport, KubernetesQuiesceUnsupportedError, type KubernetesReadSessionOptions, type KubernetesSessionOutput, type KubernetesSessionSummary, type KubernetesSessionTerminal, type KubernetesStartDetachedOptions, type KubernetesWorkspaceTerminal } from './transport.js';
 /**
@@ -217,7 +217,7 @@ export declare class KubernetesWorkspaceMismatchError extends Error {
     /** The Sandbox found standing under this workspace's name. */
     readonly sandboxName: string;
     /** Which configured field the standing object disagrees with. */
-    readonly field: 'sandboxTemplateName' | 'egressProfile' | 'runtimeClassName';
+    readonly field: 'sandboxTemplateName' | 'egressProfile' | 'perSandboxLabel' | 'runtimeClassName';
     /**
      * What the configuration asked for. `key=value` for `egressProfile`,
      * because the KEY is configurable too and the value alone would not
@@ -231,7 +231,7 @@ export declare class KubernetesWorkspaceMismatchError extends Error {
     /** The Sandbox found standing under this workspace's name. */
     sandboxName: string, 
     /** Which configured field the standing object disagrees with. */
-    field: 'sandboxTemplateName' | 'egressProfile' | 'runtimeClassName', 
+    field: 'sandboxTemplateName' | 'egressProfile' | 'perSandboxLabel' | 'runtimeClassName', 
     /**
      * What the configuration asked for. `key=value` for `egressProfile`,
      * because the KEY is configurable too and the value alone would not
@@ -350,6 +350,17 @@ export declare class KubernetesWorkspacePreconditionError extends Error {
     /** The annotation exactly as stored, when there is one. */
     storedAnnotation?: string | undefined);
 }
+/**
+ * Refuse an epoch this backend cannot honour, at the entry point rather than
+ * at the request — the same place {@link resolveRequestTimeoutMs} refuses a
+ * timeout, and for the same reason: a configuration that will never work
+ * should be named where the caller can still see which call it came from.
+ *
+ * Non-negative because the stored value is compared as a number and written
+ * as a decimal string, and an integer because a fractional epoch would
+ * round-trip through the annotation as something other than what was passed.
+ */
+export declare function assertHolderEpoch(epoch: number | undefined, where: string): number | undefined;
 /**
  * What a start that FAILED is allowed to do to the workspace it was starting
  * in.
@@ -467,6 +478,29 @@ export interface KubernetesWorkspaceTransitionOptions {
      * patch a failed start's cleanup sends.
      */
     readonly epoch?: number;
+    /**
+     * The exact Sandbox this call is about, by `metadata.uid` — what a host
+     * retained from {@link KubernetesWorkspace.identity} or
+     * {@link inspectKubernetesWorkspace}.
+     *
+     * The workspace id is a deterministic NAME: if the Sandbox the host meant
+     * was deleted and another created under the same name, the name now
+     * addresses a stranger's disk. With this set, the JSON patch of
+     * {@link suspendKubernetesWorkspace} carries `test /metadata/uid` and the
+     * DELETE of {@link deleteKubernetesWorkspace} carries `preconditions.uid`,
+     * so the API server refuses the write itself. A different owner rejects
+     * with {@link KubernetesWorkspaceReplacedError}, changes nothing and is
+     * never retried against the new owner; an object already gone still counts
+     * as deleted.
+     *
+     * Read by the two standalone verbs. A handle's own verbs ignore it and
+     * fence every write with the uid they bound, which they do without being
+     * asked. Omitted, a standalone call is conditioned on nothing about
+     * identity, as before. `volumeClaimUids` is not read here: the claims are
+     * owned by the Sandbox, so the uid is the identity a write can be
+     * conditioned on — check claims with {@link openKubernetesWorkspace}.
+     */
+    readonly expectedIdentity?: KubernetesWorkspaceExpectedIdentity;
     /**
      * Write the SandboxTemplate's CURRENT `spec.podTemplate` onto the
      * workspace as it wakes, keeping its disk — see
@@ -601,6 +635,25 @@ export interface KubernetesQuiesceOptions {
      * and still serving.
      */
     readonly graceMs?: number;
+    /**
+     * Look, and touch nothing. With `true` the call resolves (with a report
+     * of `rounds: 0`, `stopped: []`, scope `pid-namespace`) only when the
+     * guest confirms its whole PID namespace holds nothing but init and the
+     * agent, and otherwise rejects with `KubernetesQuiesceBusyError` naming
+     * what was seen. It never signals a process, never marks an execution
+     * and never waits, so a busy guest is exactly as it was and the caller
+     * can retry later.
+     *
+     * Needs the guest feature `quiesce-idle`: against an older agent the
+     * call rejects with `KubernetesQuiesceUnsupportedError` and sends
+     * nothing, because that agent would ignore this field and run the
+     * stopping quiesce. Cannot be combined with `graceMs` (a `TypeError`).
+     * An agent that cannot see its whole namespace, or cannot classify a
+     * `/proc` entry, rejects with `KubernetesQuiesceUnconfirmedError`
+     * rather than reporting idle. Captured when the call is made, before
+     * any await.
+     */
+    readonly onlyIfIdle?: boolean;
     readonly signal?: AbortSignal;
 }
 /**
@@ -704,6 +757,22 @@ export type KubernetesWorkspaceOrigin = 'created' | 'adopted-running' | 'resumed
  * contract that every other backend would then have to answer for, and no
  * `deleteDisk` field on the shared `SandboxDestroyOptions`.
  */
+/**
+ * What {@link KubernetesWorkspace.pinGuest} returns: the data-plane subset of
+ * a workspace, every call authenticated against one guest.
+ */
+export interface KubernetesPinnedGuest {
+    /** The identity this view is pinned to, frozen. */
+    readonly expected: KubernetesPinnedGuestIdentity;
+    exec(command: string, argv?: string[], options?: SandboxExecOptions): Promise<SandboxExecResult>;
+    readFile(path: string, options?: SandboxReadFileOptions): Promise<Buffer>;
+    writeFile(path: string, content: string | Buffer): Promise<void>;
+    listFiles(rootPath: string): Promise<readonly SandboxFileEntry[]>;
+    openTerminal(options: OpenTerminalOptions): Promise<TerminalSession>;
+    openTcpConnection(options: SandboxTcpConnectOptions): Promise<SandboxTcpConnection>;
+    /** As {@link KubernetesWorkspace.quiesce}, without the lifecycle queue: it is the guest's, not the workspace's. */
+    quiesce(options?: KubernetesQuiesceOptions): Promise<KubernetesQuiesceReport>;
+}
 export interface KubernetesWorkspace extends Sandbox {
     /**
      * How this handle came by its workspace — see
@@ -993,8 +1062,38 @@ export interface KubernetesWorkspace extends Sandbox {
      * `KubernetesQuiesceUnconfirmedError` when a process would not stop (the
      * message names its pid), and with `KubernetesQuiesceUnsupportedError`
      * against an image whose agent predates the op.
+     *
+     * `{ onlyIfIdle: true }` is the read-only variant: see
+     * {@link KubernetesQuiesceOptions.onlyIfIdle}. It rejects with
+     * `KubernetesQuiesceBusyError` when anything is running.
      */
     quiesce(options?: KubernetesQuiesceOptions): Promise<KubernetesQuiesceReport>;
+    /**
+     * A non-owning view of this workspace that talks ONLY to the guest the
+     * caller authenticated, and refuses (never rebinds) if it changed.
+     *
+     * `expected` names the Sandbox, the pod and the agent process
+     * ({@link KubernetesPinnedGuestIdentity}); read them off `identity` after
+     * a call the guest answered. A missing or empty field throws
+     * `KubernetesPinIncompleteError` here, synchronously.
+     *
+     * Every call on the view first compares `identity` with `expected` and
+     * refuses with `KubernetesGuestPinRefusedError` (`identity-changed`)
+     * before dialing; then it sends the request inside the guest agent's
+     * `pinned` envelope, which the agent compares with its own boot id BEFORE
+     * dispatch, so a guest that is not the pinned one runs nothing
+     * (`guest-replaced`, carrying the id of the agent that refused). A guest
+     * agent that does not advertise `pinned-guest` refuses the call
+     * (`guest-unsupported`) instead of serving it unpinned. A fenced agent
+     * that IS the pinned one answers `KubernetesAgentRetiringError`, with its
+     * id on `guestBootId`.
+     *
+     * The view owns nothing: it has no `destroy`, `suspend` or `resume`, never
+     * retires the pod, and a later `suspend()` of this workspace makes its
+     * calls refuse. It reads its pinned values once; mutating `expected`
+     * afterwards changes nothing.
+     */
+    pinGuest(expected: KubernetesPinnedGuestIdentity): KubernetesPinnedGuest;
     /**
      * Put everything this workspace has written onto its disk, now.
      *
@@ -1338,6 +1437,8 @@ export declare function assertBlockModeWorkspaceDisk(source: string, podTemplate
 export declare function assertAdoptedWorkspaceMatchesConfig(sandboxName: string, namespace: string, podTemplate: SandboxPodTemplate | undefined, expected: {
     readonly sandboxTemplateName: string;
     readonly profile?: EgressProfileLabel;
+    /** The per-sandbox selector label the configuration stamps, key and value. */
+    readonly perSandboxLabel?: EgressProfileLabel;
     readonly runtimeClassName?: string;
 }): void;
 /**
@@ -1364,6 +1465,39 @@ export declare function assertAdoptedWorkspaceMatchesConfig(sandboxName: string,
  * name and nothing reaps for them — see the docs page.
  */
 export declare function createKubernetesWorkspace(config: KubernetesBackendInternalConfig, options: KubernetesWorkspaceOptions): Promise<KubernetesWorkspace>;
+/**
+ * The pod template a refresh would write, and the revision it stamps beside
+ * it.
+ *
+ * Built once per call and carried as a pair on purpose: the hash is taken
+ * over the template AFTER this backend's overlays, so computing it anywhere
+ * but next to the object it describes is how `templateCurrent` starts
+ * reporting drift that does not exist.
+ */
+export interface PodTemplateRefresh {
+    readonly podTemplate: SandboxPodTemplate;
+    readonly hash: string;
+    /**
+     * The disks the template declares. Never written — they are CEL-immutable
+     * on a standing Sandbox and are not in the patch — and carried only so
+     * {@link assertRefreshedTemplateClaimsTheSameDisks} can refuse a template
+     * whose disks this workspace cannot have.
+     */
+    readonly volumeClaimTemplates?: readonly SandboxVolumeClaimTemplate[];
+}
+/**
+ * The overlays of `buildSandboxBody`'s create body, plus their revision.
+ *
+ * `podLabels` is `composeAdditionalPodLabels`'s map — the egress profile
+ * today — and it is an overlay like the other two rather than an extra: the
+ * patch this feeds replaces `/spec/podTemplate` whole, so a refresh that left
+ * it out would REMOVE the profile label from a workspace created with it. The
+ * replacement pod would come up selected by no per-profile policy, on a path
+ * where nothing re-reads the label, and the hash would disagree with what
+ * every create POSTs, so `templateCurrent` would report drift that no refresh
+ * could clear.
+ */
+export declare function buildPodTemplateRefresh(template: SandboxTemplateCopy, sandboxTemplateName: string, runtimeClassName?: string, podLabels?: Readonly<Record<string, string>>): PodTemplateRefresh;
 /**
  * One workspace as an INVENTORY reads it: enough to decide what to do with
  * it, and not one field that required waking it up.

package/dist/backends/kubernetes/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8JG;AAEH,OAAO,KAAK,EACX,OAAO,EACP,qBAAqB,EAErB,iBAAiB,EACjB,gBAAgB,EAEhB,sBAAsB,EAEtB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,MAAM,YAAY,CAAA;AAKnB,OAAO,EACN,KAAK,kBAAkB,EAMvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,2BAA2B,EAEhC,MAAM,eAAe,CAAA;AACtB,OAAO,EAIN,KAAK,+BAA+B,EAqBpC,MAAM,YAAY,CAAA;AAQnB,OAAO,EAQN,KAAK,kBAAkB,EAEvB,KAAK,0BAA0B,EAW/B,MAAM,cAAc,CAAA;AAMrB,OAAO,EAEN,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAE1B,+BAA+B,EAC/B,+BAA+B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAE5B,iCAAiC,EACjC,KAAK,4BAA4B,EAEjC,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAGhC,MAAM,gBAAgB,CAAA;AAEvB;;;;;;;;;;GAUG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IAIrD,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJxB,SAAkB,IAAI,kCAAiC;;IAGtD,wEAAwE;IAC/D,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IAIzD,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,eAAe,GAAG,kBAAkB;IAC5E;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IAdpC,SAAkB,IAAI,sCAAqC;;IAG1D,8DAA8D;IACrD,WAAW,EAAE,MAAM;IAC5B,iEAAiE;IACxD,KAAK,EAAE,qBAAqB,GAAG,eAAe,GAAG,kBAAkB;IAC5E;;;;OAIG;IACM,QAAQ,EAAE,MAAM;IACzB,uEAAuE;IAC9D,MAAM,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mCAAmC,GAAG,WAAW,GAAG,WAAW,CAAA;AAE3E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,mCAAmC;IAPxD,SAAkB,IAAI,uCAAsC;gBAGlD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,gFAAgF;IACvE,SAAS,GAAE,mCAAiD,EACrE,OAAO,CAAC,EAAE,YAAY;CASvB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,sCAAuC,SAAQ,KAAK;IAI/D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAN3B,SAAkB,IAAI,4CAA2C;gBAGvD,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,gEAAgE;IACvD,SAAS,EAAE,MAAM;CAM3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,oCAAqC,SAAQ,KAAK;IAI7D,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS;IACxC,2DAA2D;IAC3D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM;IAZnC,SAAkB,IAAI,0CAAyC;;IAG9D,sEAAsE;IAC7D,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,mCAAmC;IAC1B,KAAK,EAAE,MAAM;IACtB,qEAAqE;IAC5D,WAAW,EAAE,MAAM,GAAG,SAAS;IACxC,2DAA2D;IAClD,gBAAgB,CAAC,EAAE,MAAM,YAAA;CAUnC;AAmED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qCAAqC,GAAG,kBAAkB,GAAG,OAAO,CAAA;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,6BAA6B,GAAG,IAAI,GAAG,UAAU,GAAG,aAAa,CAAA;AAE7E;;;;;;GAMG;AACH,MAAM,WAAW,qCAAqC;IACrD,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAA;IAC7C;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;IACvC,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAA;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAA;CAC7C;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,oCAAoC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qCAAqC,CAAA;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iCAAkC,SAAQ,oCAAoC;IAC9F;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAA;IACpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAA;CAChD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,iCAAiC,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,+BAA+B,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvF;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC5C,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAkC,SAAQ,qBAAqB;IAC/E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAA;IACpD;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAA;CAChD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAA;AAEjF;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAoB,SAAQ,OAAO;IACnD;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;IAC1C;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAA;IAC9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAC7E;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B;;;;;;;;;;OAUG;IACH,IAAI,CACH,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,6BAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,eAAe,CACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,gCAAgC,GACxC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;OAMG;IACH,eAAe,CACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC1F;;;;;;;;;OASG;IACH,cAAc,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,+BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACrC;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACzF;;;;OAIG;IACH,WAAW,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;OAIG;IACH,YAAY,CACX,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAA;IAC/C;;;;;;;;;OASG;IACH,WAAW,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACpC,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACnF;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAA;IAC9F;;;;;;OAMG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACrF;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC7E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,0BAA0B;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qCAAqC,CAAA;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,qCAAqC,KAAK,IAAI,CAAA;IAC5F;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,KAAK,IAAI,CAAA;IAClF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IACtE;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,CAAA;IAC9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,CAAA;IAC9E;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,cAAc,CAAA;AAOhD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAOhE;AAyCD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC3C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,oBAAoB,EAAE,SAAS,0BAA0B,EAAE,GAAG,SAAS,GACrE,IAAI,CAoCN;AA6ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,mCAAmC,CAClD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,QAAQ,EAAE;IACT,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAClC,GACC,IAAI,CAoCN;AAwBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,+BAA+B,EACvC,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAuO9B;AA6xBD;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IAC1C,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,GAAG,WAAW,CAAA;IAC/C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IACxC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,wBAAwB,CAC7C,MAAM,EAAE,+BAA+B,EACvC,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC,CA+BhD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,+BAA+B,EACvC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,+BAA+B,EACvC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,iCAAiC,GACzC,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/backends/kubernetes/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8JG;AAEH,OAAO,KAAK,EACX,mBAAmB,EACnB,OAAO,EACP,qBAAqB,EAErB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAGhB,sBAAsB,EAEtB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,EACf,MAAM,YAAY,CAAA;AAKnB,OAAO,EACN,KAAK,kBAAkB,EAQvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACN,KAAK,uBAAuB,EAE5B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,mCAAmC,EAExC,KAAK,2BAA2B,EAGhC,MAAM,eAAe,CAAA;AACtB,OAAO,EAIN,KAAK,+BAA+B,EAKpC,KAAK,mBAAmB,EAiBxB,MAAM,YAAY,CAAA;AAQnB,OAAO,EASN,KAAK,kBAAkB,EAEvB,KAAK,0BAA0B,EAW/B,MAAM,cAAc,CAAA;AAYrB,OAAO,EAEN,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,EAE1B,+BAA+B,EAC/B,+BAA+B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAE5B,iCAAiC,EACjC,KAAK,4BAA4B,EAEjC,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAKhC,MAAM,gBAAgB,CAAA;AAOvB;;;;;;;;;;GAUG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IAIrD,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJxB,SAAkB,IAAI,kCAAiC;;IAGtD,wEAAwE;IAC/D,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IAIzD,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EACX,qBAAqB,GACrB,eAAe,GACf,iBAAiB,GACjB,kBAAkB;IACrB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IAlBpC,SAAkB,IAAI,sCAAqC;;IAG1D,8DAA8D;IACrD,WAAW,EAAE,MAAM;IAC5B,iEAAiE;IACxD,KAAK,EACX,qBAAqB,GACrB,eAAe,GACf,iBAAiB,GACjB,kBAAkB;IACrB;;;;OAIG;IACM,QAAQ,EAAE,MAAM;IACzB,uEAAuE;IAC9D,MAAM,EAAE,MAAM,GAAG,SAAS,EACnC,OAAO,EAAE,MAAM;CAIhB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mCAAmC,GAAG,WAAW,GAAG,WAAW,CAAA;AAE3E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,iCAAkC,SAAQ,KAAK;IAI1D,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,mCAAmC;IAPxD,SAAkB,IAAI,uCAAsC;gBAGlD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,gFAAgF;IACvE,SAAS,GAAE,mCAAiD,EACrE,OAAO,CAAC,EAAE,YAAY;CASvB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,sCAAuC,SAAQ,KAAK;IAI/D,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAN3B,SAAkB,IAAI,4CAA2C;gBAGvD,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,gEAAgE;IACvD,SAAS,EAAE,MAAM;CAM3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,oCAAqC,SAAQ,KAAK;IAI7D,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,qEAAqE;IACrE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS;IACxC,2DAA2D;IAC3D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM;IAZnC,SAAkB,IAAI,0CAAyC;;IAG9D,sEAAsE;IAC7D,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;IAC5B,mCAAmC;IAC1B,KAAK,EAAE,MAAM;IACtB,qEAAqE;IAC5D,WAAW,EAAE,MAAM,GAAG,SAAS;IACxC,2DAA2D;IAClD,gBAAgB,CAAC,EAAE,MAAM,YAAA;CAUnC;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU9F;AA6CD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qCAAqC,GAAG,kBAAkB,GAAG,OAAO,CAAA;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,6BAA6B,GAAG,IAAI,GAAG,UAAU,GAAG,aAAa,CAAA;AAE7E;;;;;;GAMG;AACH,MAAM,WAAW,qCAAqC;IACrD,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAA;IAC7C;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;IACvC,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAA;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAA;CAC7C;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,oCAAoC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qCAAqC,CAAA;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,mCAAmC,CAAA;IAC/D;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iCAAkC,SAAQ,oCAAoC;IAC9F;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAA;IACpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAA;CAChD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,iCAAiC,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,+BAA+B,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvF;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC5C,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAA;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAkC,SAAQ,qBAAqB;IAC/E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAA;IACpD;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAA;CAChD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,yBAAyB,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAA;AAEjF;;;;;;;;GAQG;AACH;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAA;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAChG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAA;IACjE,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACpE,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACnF,mHAAmH;IACnH,OAAO,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;CAC7E;AAED,MAAM,WAAW,mBAAoB,SAAQ,OAAO;IACnD;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;IAC1C;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAA;IAC9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAC7E;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B;;;;;;;;;;OAUG;IACH,IAAI,CACH,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,6BAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,eAAe,CACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,gCAAgC,GACxC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC7B;;;;;;OAMG;IACH,eAAe,CACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB;;;;;;;;;;;;;OAaG;IACH,YAAY,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC1F;;;;;;;;;OASG;IACH,cAAc,CACb,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,+BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACrC;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACzF;;;;OAIG;IACH,WAAW,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACnC;;;;OAIG;IACH,YAAY,CACX,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAA;IAC/C;;;;;;;;;OASG;IACH,WAAW,CACV,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,4BAA4B,GACpC,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACpC,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACnF;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAA;IAC9F;;;;;;OAMG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACrF;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC7E;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,GAAG,qBAAqB,CAAA;IACxE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiDG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,iCAAiC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,MAAM,WAAW,0BAA0B;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qCAAqC,CAAA;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,qCAAqC,KAAK,IAAI,CAAA;IAC5F;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,iCAAiC,KAAK,IAAI,CAAA;IAClF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAA;IACtE;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,CAAA;IAC9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,CAAA;IAC9E;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,cAAc,CAAA;AAOhD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAOhE;AAyCD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC3C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,oBAAoB,EAAE,SAAS,0BAA0B,EAAE,GAAG,SAAS,GACrE,IAAI,CAoCN;AA6ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,mCAAmC,CAClD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,kBAAkB,GAAG,SAAS,EAC3C,QAAQ,EAAE;IACT,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAA;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAClC,GACC,IAAI,CAiDN;AAwBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,+BAA+B,EACvC,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAgT9B;AAsfD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAA;CACrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACtC,QAAQ,EAAE,mBAAmB,EAC7B,mBAAmB,EAAE,MAAM,EAC3B,gBAAgB,CAAC,EAAE,MAAM,EACzB,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1C,kBAAkB,CASpB;AA4WD;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA0B;IAC1C,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,GAAG,WAAW,CAAA;IAC/C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IACxC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,wBAAwB,CAC7C,MAAM,EAAE,+BAA+B,EACvC,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC,CA+BhD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,+BAA+B,EACvC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,oCAAoC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,+BAA+B,EACvC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,iCAAiC,GACzC,OAAO,CAAC,IAAI,CAAC,CAiBf"}